1. Controller
The data controller is Néstor Calderón Pérez, the developer of YoControlo, based in Spain. Send privacy questions to soporte@yocontrolo.net.
Last updated: 16 August 2026.
2. Data we process
Account and identity
User identifier, email address, display name, profile image, sign-in provider, account status, roles, permissions, benefits and metadata required for authentication and administration.
Information entered in YoControlo
Movements, categories, recurring expenses, debts, preferences and other financial information you choose to record. Shared features also process groups, memberships, friendships, invitations, splits, confirmations and notifications.
Security and operation
Technical and activity data needed to sign in, prevent abuse, apply limits, investigate errors and maintain administrative traceability. If you contact support, we process the message and contact details you include.
We do not ask for bank credentials. YoControlo does not connect to your banks, initiate transfers or hold money.
3. Purposes and legal bases
- Provide the service: create your account, synchronise data, process schedules and enable groups. Basis: performance of the accepted terms.
- Protect the platform: authenticate, enforce permissions, prevent fraud and abuse, and maintain proportionate audits. Basis: legitimate interest and service security.
- Provide support: answer questions and resolve incidents. Basis: performance of the service or steps requested by you.
- Optional analytics: measure use of the public website only when you accept it. Basis: consent, which can be withdrawn at any time.
- Legal obligations: respond to valid requests and retain information when required by law.
4. Providers and recipients
We use technical providers required to operate the service, including Firebase Authentication/Google for identity, Cloudflare for network protection, and the infrastructure running the API, database and backups. They receive only the information needed for their role and are subject to their own data-protection commitments.
We do not sell personal information or disclose financial history to advertisers. Where a provider requires an international transfer, the safeguards required by data-protection law apply.
5. Data retention
Account data and information you enter are kept while the account remains active or until you request deletion. Security logs, audits, temporary backups or legally required records may remain for the time strictly necessary to protect the service, address liabilities or complete technical deletion.
Support enquiries are retained only as long as needed to resolve and document the assistance provided.
6. Your rights
Where applicable, you can request access, rectification, erasure, restriction, objection or portability. You may also withdraw consent without affecting earlier processing and complain to the Spanish Data Protection Agency.
Write to soporte@yocontrolo.net. We may request reasonable information to verify that you own the account.
8. Security and changes
We use authentication, server-side authorisation, separated permissions, usage limits, audits and operational measures intended to reduce unauthorised access. No connected system can promise zero risk, so these layers are reviewed and improved continuously.
If this policy changes materially, we will communicate it through the website, app or account email as appropriate.